mirror of
https://github.com/nearai/ironclaw.git
synced 2026-09-03 08:06:01 +08:00
cae1a04f95
* feat(sandbox): add Docker and Railway user sandbox profiles * fix(sandbox): close local review gaps * test(sandbox): cover production local profile wiring * fix(ci): schedule sandbox paths and classify tests * fix(sandbox): bound Railway user lifecycle state * test(cli): cover sandbox profiles in profile list * test(architecture): shrink composition support debt * fix(sandbox): harden Railway lifecycle review gaps * fix(sandbox): fail closed on Railway provider errors * fix(sandbox): close remaining review gaps * test(sandbox): remove Railway timing flake * chore(composition): record sandbox assembly budget * fix(sandbox): retain Railway parse causes * fix(sandbox): address post-merge review findings * fix(sandbox): close railway lifecycle review gaps * fix(sandbox): retain failed railway cleanup state * feat(sandbox): enable direct egress for sandbox profiles * test(sandbox): keep public egress in live canary * chore(sandbox): document bounded slice safety * test(architecture): ratchet user sandbox contract growth * test(sandbox): strengthen profile regression coverage * test(sandbox): exercise harness validation at boundary * test(sandbox): place setup check with harness contracts * fix(sandbox): preserve nonzero Docker exit results * fix(host-runtime): resolve hosted tenant workspace mounts (#7214) * fix(sandbox): address review feedback on bounded startup (#7214) * fix(ci): derive sandbox Docker paths from crate inventory (#7214) * fix(sandbox): finalize Railway lifecycle and profile parity * test(sandbox): update hosted process failure contract * fix(sandbox): address CodeRabbit review feedback (#7214)
13 lines
437 B
Docker
13 lines
437 B
Docker
# Python-only PR1 worker for the local-Docker user-sandbox profile.
|
|
# Keep the base digest aligned with RailwayPreviewSandboxConfig's default.
|
|
FROM python:3.12-slim@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de
|
|
|
|
RUN groupadd --gid 1000 sandbox \
|
|
&& useradd --uid 1000 --gid sandbox --create-home --shell /bin/sh sandbox
|
|
|
|
ENV HOME=/home/sandbox
|
|
WORKDIR /workspace
|
|
USER 1000:1000
|
|
|
|
CMD ["python", "--version"]
|